[Bug 890088] CVE-2012-5669 freetype: heap buffer over-read in BDF parsing _bdf_parse_glyphs() (#37906)

bugzilla at redhat.com bugzilla at redhat.com
Thu Jan 24 09:36:50 UTC 2013


Product: Security Response
https://bugzilla.redhat.com/show_bug.cgi?id=890088

Huzaifa S. Sidhpurwala <huzaifas at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Whiteboard|impact=important,public=201 |impact=important,public=201
                   |21215,reported=20121225,sou |21215,reported=20121225,sou
                   |rce=internet,cvss2=6.8/AV:N |rce=internet,cvss2=6.8/AV:N
                   |/AC:M/Au:N/C:P/I:P/A:P,rhel |/AC:M/Au:N/C:P/I:P/A:P,rhel
                   |-5/freetype=affected,rhel-6 |-5/freetype=affected,rhel-6
                   |/freetype=affected,fedora-a |/freetype=affected,fedora-a
                   |ll/freetype=notaffected,fed |ll/freetype=affected,fedora
                   |ora-all/mingw32-freetype=no |-all/mingw-freetype=affecte
                   |taffected                   |d

--- Comment #12 from Huzaifa S. Sidhpurwala <huzaifas at redhat.com> ---
This issue affects the version of freetype as shipped with Fedora-17 and
Fedora-18.

This issue affects the version of mingw-freetype as shipped with Fedora-17 and
Fedora-18.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=ogz0oCoiGI&a=cc_unsubscribe


More information about the fonts-bugs mailing list